Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa
File:                     d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa (raw, json)
Hash identifier:          kXvj6Mj5aqeHu+CDymq/9tQAU9AqYu6jfkLNihuR/es=
Subject key identifier:   4B:7F:F0:D2:1F:A2:CB:D6:28:E9:C1:DD:C1:58:DD:EA:E5:D2:65:08
Certificate issuer:       /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial:       010D0C9F4328584A23C01A8A9697C5BF6791EBD0
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2602:f86e:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1a:8a:96:97:c5:bf:67:91:eb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=17510922-18bd-480d-819e-73caea15db2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:3f:f6:d2:bd:a0:d9:03:f2:16:9e:21:23:
                    99:f6:c8:76:fa:f7:6b:1a:52:93:e9:7a:fb:1d:9a:
                    71:2c:82:cd:b7:3b:45:67:9f:ba:17:33:2a:4b:ea:
                    34:4c:d8:82:be:c5:8f:5a:89:fe:a4:35:11:49:4c:
                    e1:7c:6c:80:eb:a5:de:f5:3c:93:b8:ae:ed:0c:c2:
                    20:10:e3:79:e4:6c:10:30:37:75:17:97:33:67:b2:
                    bd:90:74:40:01:5a:d9:17:12:97:46:4b:f2:9f:b3:
                    62:f3:11:53:15:17:30:16:06:89:b8:fc:c8:ae:82:
                    ff:a4:80:fc:c8:18:06:36:9b:e5:22:0a:94:e3:3a:
                    ab:6d:a9:5b:ed:12:e7:bf:60:b1:bf:fc:df:4b:7c:
                    8d:4c:70:84:8e:2c:11:3d:f6:af:f1:08:f9:72:56:
                    05:40:16:8a:92:6a:2a:da:cc:21:c4:06:9b:1a:66:
                    4d:3c:88:0d:23:b9:1f:9e:ca:5e:c7:87:15:58:8a:
                    a9:fc:08:ea:1b:9b:24:84:cd:e2:95:77:37:93:aa:
                    1d:da:18:bb:0a:1f:c0:4a:67:d8:32:3b:f2:28:47:
                    3f:41:e4:aa:f9:d5:de:34:6c:74:e7:9d:f0:41:78:
                    28:19:cc:44:97:a2:1c:b1:46:e6:34:f1:fe:b3:55:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7F:F0:D2:1F:A2:CB:D6:28:E9:C1:DD:C1:58:DD:EA:E5:D2:65:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl

            X509v3 Authority Key Identifier:
                keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86e:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b5:d3:05:05:69:69:44:d9:31:67:83:b9:3e:fd:94:75:46:
         6d:fb:a3:9c:b5:2d:93:97:4a:73:3a:f8:f7:ef:ba:7e:86:36:
         99:76:48:ef:13:17:49:d2:3d:63:8f:b0:13:78:ad:22:ed:20:
         11:c3:d7:6d:df:b4:65:ff:49:b5:27:0e:97:20:39:de:50:25:
         43:45:56:e9:2b:81:2d:15:f0:95:06:de:bb:ec:b1:df:30:78:
         dc:97:c1:42:a7:e8:a7:45:88:32:ec:1b:fc:db:55:43:4f:4b:
         34:e8:a7:29:c1:f1:cd:2e:b6:f3:87:e5:42:49:56:d3:c6:e1:
         89:f5:ab:a0:0b:b3:a7:e7:33:bf:b4:52:4e:c3:14:eb:74:22:
         0a:34:b3:95:7a:38:14:64:fb:d4:8a:da:34:b1:b2:26:50:3f:
         29:fd:a2:ed:b9:0b:f4:d6:21:6d:fe:1b:11:48:41:d7:2d:96:
         41:fa:fd:9a:26:2c:d9:2e:56:a0:9c:87:f8:9c:a2:51:5e:63:
         92:cc:73:8b:d9:25:4f:dd:d2:7e:32:04:1e:a4:48:b6:12:eb:
         e9:09:5a:56:36:87:30:76:30:27:b2:77:ca:53:90:c1:ba:8e:
         1c:0b:bf:3b:9a:12:90:d9:5c:ab:d0:c9:92:09:66:4f:19:20:
         92:63:32:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:43:42 2025 by rpki-client